759f289b29a0585ec4ed14a2619794a0

Sharing

Copy URL Twitter E-mail

General

Target

759f289b29a0585ec4ed14a2619794a0
Size

210KB
MD5

759f289b29a0585ec4ed14a2619794a0
SHA1

f2b25ee89deae7f3196d64da5c1eb540038fad30
SHA256

32aa106a687ffeb3860ae22c2f6e36cfea8fae10a046410bf74ec6009c943434
SHA512

cbf85243437046663a1be42fc11e2b060d9fd6fa28e8398eb848c2c7e1c6a4ea828536a6a4a6acd42a8eaf9cecc2661872a03c1247984b6dd7c36bc560050413
SSDEEP

3072:xOayX66MwN8fXUfUxCJozDPKi3cm0NxS3tWq:xOayX6OwXpKiMm0bSA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
759f289b29a0585ec4ed14a2619794a0

Files

759f289b29a0585ec4ed14a2619794a0
.exe windows:4 windows x86 arch:x86

4a882dcba68646bc42887d784809e0c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo
GetIfTable

comctl32

ord17

shlwapi

SHDeleteKeyA

ws2_32

WSAIoctl
setsockopt
recv
__WSAFDIsSet
select
send
htons
inet_addr
socket
connect
closesocket
WSAStartup
WSACleanup
htonl
inet_ntoa
sendto

kernel32

CreateProcessA
SetStdHandle
GetProcAddress
LoadLibraryA
Sleep
lstrlenA
lstrcpynA
ExitProcess
CloseHandle
ReleaseMutex
OpenMutexA
WaitForSingleObject
GetLastError
GetWindowsDirectoryA
GetTickCount
GetSystemInfo
lstrcpyA
GetSystemDefaultLangID
SetLastError
GetModuleFileNameA
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
GetVersion
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
GetProcessVersion
lstrcmpA
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
TerminateProcess
RtlUnwind
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
RaiseException
ExitThread
HeapSize
HeapReAlloc
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr

user32

GetDesktopWindow
wsprintfA
EnableWindow
MessageBoxA
SendMessageA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
UnhookWindowsHookEx
LoadStringA
SetWindowsHookExA
PeekMessageA
CallNextHookEx
GetKeyState
DispatchMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA

advapi32

StartServiceCtrlDispatcherA

Sections

.data
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a882dcba68646bc42887d784809e0c0

Headers

File Characteristics

Imports

iphlpapi

comctl32

shlwapi

ws2_32

kernel32

user32

advapi32

Sections

.data Size: 111KB - Virtual size: 111KB

.rsrc Size: 98KB - Virtual size: 97KB

.data
Size: 111KB - Virtual size: 111KB

.rsrc
Size: 98KB - Virtual size: 97KB